How to View the PAN-OS or GlobalProtect Version through the CLI
120796
Created On 09/26/18 13:49 PM - Last Modified 11/20/20 22:08 PM
Symptom
This document describes how to check the downloaded PAN-OS or GlobalProtect Client version on the CLI.
Environment
- Any PAN-OS.
- Palo Alto Firewall.
Resolution
To display a list of downloaded PAN-OS or GlobalProtect client versions, use the following command:
> debug swm list
Example:
admin@Lab196-96-PA-VM> debug swm list
Product B Version Built Loaded
--------------------------------------------------------------------------------
gpclient 5.2.2 2020-08-27 15:01:31 2020-11-20 13:49:44
gpclient 5.2.4 2020-11-12 11:55:03 2020-11-20 13:48:50
panos * 8.1.0 2018-02-28 18:48:00 2018-08-24 21:17:50
panos * 9.0.0 2019-02-01 21:27:15 2020-02-10 19:53:09
panos 9.0.5 2019-11-07 14:58:20 2020-07-27 19:05:30
panos * 9.1.0 2019-12-12 19:44:18 2020-11-12 15:02:24
- The * under the B column indicates the base version. The example above shows that PAN-OS 9.0.0, 9.1.0, and 8.1.0 are the base versions.
- The Loaded column displays the date the image was downloaded.
- Using the "debug swm info" command, the CLI output will display only the downloaded and activated software
- Another CLI command "show system info" will display the current activated software.
The WebGUI output that is shown below displays all available software versions.
GUI: Device > Sofware (For PAN-OS versions).
GUI: Device > GlobalProtect Client (For GlobalProtect client versions).